How Connected applies sync policy rules
Sync policies contain rules that define which devices users can sync with Connected, the types of files that they can sync from those devices, and whether they can sync over a metered connection.
When a user attempts to sync a file, Connected must determine whether policy allows it. To do so, it searches sync rules from all policies that apply to the user's profile, starting with the highest priority rule. If the rule does not apply, it checks the rule with the next highest priority. If necessary, it continues its search in decreasing priority order until it finds a rule that applies. The Connected web application lists rules in top-down order, so the highest priority rule of a policy appears first.
Connected searches rules in the following order:
1. Highest to lowest priority locked corporate rules
2. Highest to lowest priority group rules that apply to the user's profile, if any
3. Highest to lowest priority unlocked corporate rules
If the system cannot find a rule that applies, it applies the default sync behavior.
Detailed examples
When you create rules, ensure that you order them in a sequence that reflects your priorities because when the first match occurs, the search process stops. For example, suppose that you create a policy that contains two rules:
- Prevent mobile devices from uploading MP3 files
- Allow mobile devices to upload any type of file
If the policy contains the rules in this order, it prevents users from uploading MP3 files from mobile devices because the rule listed first, and therefore with the higher priority, prevents it. However, suppose that you list the rules in the reverse order:
- Allow mobile devices to upload any type of file
- Prevent mobile devices from uploading MP3 files
In this case, the policy allows users to upload MP3 files because the rule that allows upload of any type of file has the higher priority.
Suppose that you create two policies, a corporate policy and a Sales group policy. The following table lists each policy's rules in the order that you assigned while creating them in the web application.
Corporate policy rules | Sales group policy rules |
---|---|
|
|
The following table shows the order in which Connected mobile apps search these rules to determine whether to allow the sync action.
Rule (in order processed) |
Sync action |
---|---|
PDF corporate rule As the locked corporate rule with the highest priority, applications process this rule first. |
Allows all users to upload PDF files from mobile devices. |
TXT corporate rule Processed next because it is the locked corporate rule with the next highest priority. |
Allows all users to upload, download, and view TXT files from mobile devices. |
MP3 Sales rule After all corporate locked rules, applications process this rule only for users assigned to the Sales group. |
Allows only Sales group members to upload and download MP3 files from mobile devices. |
MP3 corporate rule After all group-specific rules, applications process this rule because it has the highest priority of all unlocked corporate rules. |
Allows all users who are not in the Sales group to upload MP3 files from mobile devices, but not to download them. |
All files corporate rule Processed last because it has the lowest priority of all unlocked corporate rules. |
Prevents all users from uploading, downloading, or viewing any other type of file from a mobile device.
|
Example
Two users attempt to download an MP3 file from a mobile device. One user is a member of the Sales group member, which has a group-level sync policy. The other user is a member of the Marketing group, which does not have a group-level policy. The following table shows how mobile apps process the rules to determine whether to allow the download.
Rule (in order processed) |
Impact to Sales group member | Impact to Marketing group member |
---|---|---|
PDF corporate rule |
Does not apply to MP3 files | Does not apply to MP3 files |
TXT corporate rule |
Does not apply to MP3 files | Does not apply to MP3 files |
MP3 Sales rule |
Match found: applies to MP3 files and mobile devices Based on the rule, allows download of the MP3 file. |
Not processed The rule applies only to Sales group members. |
MP3 corporate rule |
Not processed |
Does not apply to download of MP3 files on mobile devices |
All files corporate rule |
Not processed |
Match found: applies to download of all files and mobile devices Based on the rule, prevents download of the MP3 file. |